It includes clear installation guidance, a changelog, and a matching source repository. The small maintainer base and missing security policy leave less evidence for ongoing support.
67%
Total Score
50
100
89
67
The package and repository are maintained under a matching individual owner rather than an organization. This is consistent ownership, but offers limited visible organizational redundancy.
The package has 20 releases since February 2022, but no release in the last 16 months. That extended release gap raises maintenance concerns despite its established history.
There were no commits and no active maintainers in the last 3 months. Combined with the long release gap, this is meaningful evidence of currently slow maintenance.
The repository has only one open issue and no new or closed issues or pull requests in the last month. This is quiet rather than clearly abandoned, but provides little evidence of active support.
Composer is used as a build tool, but no security scanning tools were detected. The missing scanning coverage is a modest transparency gap, not evidence of abandonment by itself.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
typo3/cms-core Version ^13.4.12 | — | — |
spatie/dropbox-api Version 1.23.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.